Cert.der is dead?

[clyra]

Hi,

It seems that http://203.0.113.1/cert.der. is dead. Also, may you provide further instructions about how to generate the required .pem files? ty

[andybalholm]

That link only works if you are accessing it through a Redwood proxy; it returns the root certificate the proxy is using.

To generate your root certificates, follow steps 1 to 4 at https://www.wikihow.com/Be-Your-Own-Certificate-Authority, except omit the -des3 parameter from the first command.

[clyra]

Hi,

ty!

[mrbluecoat]

Some additional recent gotchas and guides:

https://blog.nviso.eu/2018/01/31/using-a-custom-root-ca-with-burp-for-inspecting-android-n-traffic/

FiloSottile/mkcert#174

FiloSottile/mkcert#276

https://ivrodriguez.com/installing-self-signed-certificates-on-android/